General

  • Target
    https://github.com/Orbdiff/BAMReveal/releases/tag/v1.3.1
  • Sample260604-1dc4fsfy41

Malware Config

Targets

    • Target
      https://github.com/Orbdiff/BAMReveal/releases/tag/v1.3.1
    • Downloads MZ/PE file

    • Executes dropped EXE

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks